cp_gaia_ssh_server_settings.¶
Synopsis¶
Modify ssh server settings.
Requirements¶
The below requirements are needed on the host that executes this module.
supported starting from gaia_api >= 1.7
Parameters¶
- version (False, str, None)
Gaia API version for example 1.6.
- enabled_ciphers (False, list, None)
Enabled ssh ciphers.
- enabled_mac_algorithms (False, list, None)
Enabled ssh mac algorithms.
- enabled_kex_algorithms (False, list, None)
Enabled ssh kex algorithms.
Notes¶
Note
Supports
check_mode
.
Examples¶
- name: Set ssh server settings
check_point.gaia.cp_gaia_ssh_server_settings:
enabled_ciphers: ['aes128-ctr', 'aes128-gcm@openssh.com', 'aes192-ctr', 'aes256-ctr',
'aes256-gcm@openssh.com', 'chacha20-poly1305@openssh.com']
enabled_kex_algorithms: ['curve25519-sha256', 'curve25519-sha256@libssh.org',
'diffie-hellman-group14-sha1', 'diffie-hellman-group14-sha256',
'diffie-hellman-group16-sha512', 'diffie-hellman-group18-sha512',
'diffie-hellman-group-exchange-sha256', 'ecdh-sha2-nistp256',
'ecdh-sha2-nistp384', 'ecdh-sha2-nistp521']
enabled_mac_algorithms: ['hmac-sha1', 'hmac-sha1-etm@openssh.com',
'hmac-sha2-256', 'hmac-sha2-256-etm@openssh.com',
'hmac-sha2-512', 'hmac-sha2-512-etm@openssh.com',
'umac-64-etm@openssh.com', 'umac-64@openssh.com',
'umac-128-etm@openssh.com', 'umac-128@openssh.com']
Return Values¶
- ssh_server_settings (always., dict, )
The updated ssh server settings details.